Multiple TP-Link Omada Vulnerabilities found

Several vulnerabilities have been found in the TP-Link Omada system, which is a popular software-defined networking solution for small to medium-sized businesses. The vulnerabilities could let attackers run code from a distance, causing serious security issues.

The affected devices are wireless access points, routers, switches, VPN devices, and hardware controllers for the Omada software.

• Cyber Attack
• Data Breach

Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed

By infosecbulletin / Wednesday , October 21 2026

Hacker offers to sell Rajasthan Government’s Department of Information Technology & Communication (DoIT&C) data in a underground forum. The threat...

Read More

• Alert

Update now! PHP2Shell: Critical PHP vulnerabilities patched

By infosecbulletin / Wednesday , October 21 2026

The PHP team released urgent security updates to fix PHP2Shell, two serious flaws (CVE-2026-109618 and CVE-2026-109619) that let attackers run...

Read More

• Hot Topic

Trump says data centres should pay dividends to local community

By infosecbulletin / Wednesday , October 21 2026

US President Donald Trump said on Wednesday that companies ​building data centers should pay a "dividend" to the communities ‌where...

Read More

• Alert
• Cyber Attack

Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257

By infosecbulletin / Tuesday , October 20 2026

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate...

Read More

• Hot Topic

DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools

By infosecbulletin / Tuesday , October 20 2026

The U.S. Department of Homeland Security (DHS) ordered federal agencies to stop using DeepSeek products and remove it from all...

Read More

• Hot Topic

CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines

By infosecbulletin / Monday , October 19 2026

NSA, CISA, and NIST have released security guidelines to find, control, and stop AI agents that go beyond their allowed...

Read More

• Hot Topic

Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes

By infosecbulletin / Sunday , October 18 2026

Anthropic says a Claude research model showed how the National Security Agency made seeds for five NIST elliptic curves in...

Read More

• Alert
• Hot Topic

Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In

By infosecbulletin / Saturday , October 17 2026

The Indian Computer Emergency Response Team (CERT-In), which is the government's cybersecurity arm, has issued a "critical" rated advisory after...

Read More

• International

MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion

By infosecbulletin / Friday , October 16 2026

MITRE released ATT&CK v20 adding nine Enterprise techniques that explain how attackers might target AI systems, steal app-specific passwords to...

Read More

• Cyber Attack

Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls

By infosecbulletin / Friday , October 16 2026

Cybersecurity researchers at Palo Alto Networks’ Unit 42 have uncovered a sophisticated cyberattack targeting Fortinet network management infrastructure, involving the...

Read More

Vulnerability Details:

Identified Vulnerabilities

Twelve unique vulnerabilities were identified and reported to the vendor following our responsible disclosure policy.

Talos ID CVE(s)
TALOS-2023-1888 CVE-2023-49906–CVE-2023-49913
TALOS-2023-1864 CVE-2023-48724
TALOS-2023-1862 CVE-2023-49133–CVE-2023-49134
TALOS-2023-1861 CVE-2023-49074
TALOS-2023-1859 CVE-2023-47618
TALOS-2023-1858 CVE-2023-47617
TALOS-2023-1857 CVE-2023-46683
TALOS-2023-1856 CVE-2023-42664
TALOS-2023-1855 CVE-2023-47167
TALOS-2023-1854 CVE-2023-47209
TALOS-2023-1853 CVE-2023-36498
TALOS-2023-1850 CVE-2023-43482

Cisco Talos found twelve vulnerabilities in the TP-Link Omada system. The vendor was informed about these vulnerabilities following a responsible disclosure policy. The affected devices are:

EAP 115 and EAP 225 wireless access points
ER7206 gigabit VPN router
Omada software controller

To read out the full report click here.